fw4: fix enabling NAT reflection rules for DNATs without explicit family